Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GzvUB664eZxKVIu8WnBHp4_TtcU.roa
File:                     GzvUB664eZxKVIu8WnBHp4_TtcU.roa (raw, json)
Hash identifier:          QRExyAE2uXbGcFuiWtD8Rf03+bBuj+y3vFJuFZGAVww=
Subject key identifier:   1B:3B:D4:07:AE:B8:79:9C:4A:54:8B:BC:5A:70:47:A7:8F:D3:B5:C5
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01B4
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GzvUB664eZxKVIu8WnBHp4_TtcU.roa
Signing time:             Mon 20 Feb 2023 07:53:16 +0000
ROA not before:           Mon 20 Feb 2023 07:53:16 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.13/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:16 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=1B3BD407AEB8799C4A548BBC5A7047A78FD3B5C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:64:a6:a9:c1:3f:f8:1a:c7:af:15:21:ac:
                    de:eb:9c:85:6d:95:15:57:5a:26:6f:ba:15:4c:03:
                    c3:8f:7c:cd:db:1c:ce:29:1c:91:4c:19:fb:cb:d4:
                    87:d5:61:7c:ef:ac:2c:57:b1:d2:5e:fc:5e:e7:de:
                    76:46:30:e7:25:7d:b0:90:ef:d5:f5:54:aa:ba:41:
                    19:e9:e1:a7:fd:9f:0a:1a:80:ca:23:50:6d:cb:82:
                    61:90:9a:91:2a:b9:e4:6d:18:d4:63:d7:8e:e3:9a:
                    bb:cb:bc:37:43:90:22:bd:a9:27:2a:06:59:5e:da:
                    79:94:5c:e8:02:1f:7b:72:40:6c:bc:e5:09:3b:d6:
                    e7:9e:4e:04:2b:2c:41:6d:73:34:31:86:17:db:32:
                    e9:78:71:14:46:5d:fc:28:91:80:0a:91:17:41:69:
                    9f:5a:1f:e3:fa:9e:30:a1:71:cc:a5:38:be:ac:e6:
                    64:75:7f:31:1e:33:46:a7:81:49:05:17:ef:e3:c2:
                    50:ce:c4:d3:7d:d3:6b:38:1a:dc:b8:06:c8:c3:7f:
                    b4:5d:44:4c:a2:2d:02:4e:82:d0:6b:4f:85:2a:93:
                    e2:75:1f:e9:ee:b6:28:d9:80:bb:54:c6:c3:b5:50:
                    20:29:b0:09:f3:61:33:ad:44:0f:0d:16:ba:cd:06:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3B:D4:07:AE:B8:79:9C:4A:54:8B:BC:5A:70:47:A7:8F:D3:B5:C5
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GzvUB664eZxKVIu8WnBHp4_TtcU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.13/32

    Signature Algorithm: sha256WithRSAEncryption
         68:35:90:f5:5d:74:28:44:b5:fc:d7:ce:21:3b:8b:0a:9b:e4:
         c4:5c:62:d1:1d:3c:8a:b5:f6:da:34:07:67:b6:1d:65:1e:ec:
         6d:fc:13:70:ec:a4:45:bf:18:f5:f5:14:20:bc:c0:15:15:ae:
         39:d5:3c:a8:08:c4:dd:1d:b3:5d:e6:97:8f:d5:7a:5d:a3:b3:
         03:4c:43:aa:f3:45:76:13:99:6d:a4:28:b0:3f:92:e4:6f:71:
         c8:f8:6c:58:8e:78:48:03:7c:e8:e2:cf:37:25:5b:8a:56:94:
         3b:6b:64:f4:91:53:b1:fa:d6:d9:2d:7c:97:c5:04:64:0e:0d:
         01:1d:94:d4:75:46:c3:94:ad:c7:f9:41:74:4f:2f:c7:d3:b5:
         93:5e:2a:42:06:c2:a9:f9:63:fe:57:58:d5:e4:40:81:d7:e6:
         c2:be:64:79:7d:9a:01:a0:33:55:bd:b4:f5:63:ef:2f:49:80:
         26:9b:75:09:f0:94:54:de:49:b1:6f:63:bf:2f:43:56:a9:b7:
         fd:32:f5:60:53:02:12:b2:d8:7c:a9:6f:dd:3d:96:db:b5:ee:
         85:21:12:c9:44:e7:9d:e2:2f:9f:89:62:3d:8b:82:5d:6c:6d:
         c5:62:af:3b:d0:c8:b1:b2:fb:42:e1:1f:16:0e:8b:3e:97:3c:
         fb:1f:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:03 2023 by rpki-client on console-fra.rpki-client.org